Editorial illustration separating cancelled, suspended and renewal-refused registration actions in Australia
Illustration: the total of 45 combines different registration actions across remittance and virtual-asset providers; it is not a chart of 45 crypto convictions. · Signal Money · generated with OpenAI · AUSTRAC registration actions — editorial illustration · 2026-09-13 Australia/Sydney · Original generated illustration
Key point: The 45 registrations span two sectors and three administrative outcomes, not 45 convictions.

AUSTRAC said on 7 September that it had cancelled, suspended or refused to renew 45 registrations across remittance and virtual-asset service providers during the past year. The number sounds like a single crypto crackdown, but it combines different business types, different administrative outcomes and different reasons. It does not mean 45 crypto firms were convicted of a crime.

One total combines three actions and two sectors

Key point: AUSTRAC did not publish a breakdown among cancellation, suspension and non-renewal.

Cancellation, suspension and refusal to renew are not interchangeable. Cancellation ends a registration, suspension pauses it for a period or under conditions, and refusal to renew stops it continuing when renewal is denied. AUSTRAC did not publish a numerical split among those three outcomes in its announcement.

Key point: The combined total cannot be treated as a count of Australian crypto exchanges.

The 45 also covers remittance providers as well as virtual-asset service providers, known as VASPs. AUSTRAC did not say all 45 were crypto businesses, and its public VASP action page does not add up to a sector breakdown for the combined headline. Treating 45 as a count of crypto exchanges would therefore invent a denominator the regulator did not provide.

The reasons range from inactivity to serious risk

Key point: Reasons ranged from inactivity and insolvency to significant financial-crime risk.

AUSTRAC listed several reasons for the actions: some businesses lacked the capacity to operate, were dormant, had not provided services for a long period, were insolvent, held the wrong registration or failed to report material changes. It also cited cases involving significant money-laundering or terrorism-financing risk. That list matters because an administrative status change is not, by itself, proof that every affected business committed the same offence.

Key point: GetCoins was one named case and does not establish a finding against every registration.

The regulator gave GetCoins as a specific example. BA Digital Ventures, trading as GetCoins, had its VASP registration cancelled on 4 June after customer complaints and an information request; AUSTRAC said the service was allegedly exploited by organised cryptocurrency investment scams. The word allegedly and the named case should stay attached: it is evidence about one provider, not a criminal finding against all 45 registrations.

Registration is necessary, but it is not a safety guarantee

Key point: Registration is a basic status check rather than a guarantee against customer loss.

AUSTRAC says a business providing virtual-asset services must be registered, and a business with a cancelled registration can no longer operate that service. For a customer, the register is therefore a basic identity and status check. It is not a promise that a token will hold its price, that withdrawals will always be instant or that every customer loss will be reimbursed.

Key point: Custody, withdrawal, fee and complaint terms still require a separate review.

That distinction can feel frustrating because a government register looks reassuring. Yet the useful comfort is narrower: it tells you whether the legal entity has the required anti-money-laundering registration at the time you check. It does not replace reading custody, withdrawal, fee and complaint terms, and it cannot turn a volatile asset into a bank deposit.

Check the legal entity before sending money

Key point: The legal entity and ABN should match the company named in the customer's contract.

Start with the provider's exact legal name and Australian Business Number rather than its app name. Match those details against AUSTRAC's public VASP records and the provider's own terms, then save a dated copy of the result. A familiar brand can use several legal entities, so a registration held by one company is not automatically evidence for another company named in your contract.

Key point: Use the provider's real fee schedule and test withdrawals before transferring more.

Next, test the real transfer amount. In a clearly hypothetical example, a platform charging a 0.75% transaction fee would take A$15 from an A$2,000 purchase before any spread, network fee or price movement; A$2,000 × 0.0075 = A$15. Use the fee schedule for your exact product rather than this illustration, and make a small withdrawal test before committing an amount you cannot comfortably lose.

Read 45 as a regulatory signal, not a verdict

Key point: Read the 45 actions as a prompt to verify, not as 45 criminal verdicts.

The useful message in AUSTRAC's announcement is that registrations are being actively reviewed and that customers should verify the entity they use. The headline number does not reveal how many actions involved crypto, how many were simple inactivity or insolvency cases, or how many concerned suspected financial crime. Check the current legal entity and status, then judge custody, fees and market risk separately; that is more protective than turning 45 mixed actions into 45 convictions.

Sources and dates